PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fwrite

file system operations fwrite

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization2331663990k+Output is not escaped
#202Ocean Extra231,4942,107500k+Non-prefixed global variable
#203ExpressTechSoftwares Discord Add-on for Paid Memberships Pro23454449700Text Domain Mismatch
#204Postie2340825910k+Output is not escaped
#205PowerPress Podcasting plugin by Blubrry234,8152,45220k+Output is not escaped
#206Print My Blog – Print, PDF, & eBook Converter WordPress Plugin231,0771,6608k+Non-prefixed global variable
#207Radio Station by netmix® – Manage and play your Show Schedule in WordPress!239343,6191k+Non-prefixed global variable
#208Manago AI & Leadoo AI236444291k+Unsafe printing function
#209SecuPress with Simple SSL – Simple and Performant Security231,6971,60140k+Non-prefixed global variable
#210Seraphinite Post .DOCX Source231,156110900Output is not escaped
#211Seriously Simple Podcasting2354862930k+Non-prefixed hook name
#212Local Google Analytics for WordPress – caches external requests235511993k+Output is not escaped
#213Image Optimizer, Resizer and CDN – Sirv236161,0041k+Output is not escaped
#214Site Reviews231,62660460k+Output is not escaped
#215Slider by 10Web – Responsive Image Slider235,81497610k+Output is not escaped
#216Smart Marketing SMS and Newsletters Forms232,2321,0151k+Text Domain Mismatch
#217Legal Terms and Conditions Popup for User Login and WooCommerce Checkout23524237700Output is not escaped
#218Trinity Audio – Text to Speech AI audio player to convert content into audio231192272k+Non-prefixed global variable
#219W3 Total Cache23307678900k+Non-prefixed global variable
#220Cart PDF for WooCommerce235311721k+Exception output is not escaped
#221Billingo Plus integráció WooCommerce-hez231,119507900Text Domain Mismatch
#222PostFinance Checkout239792141k+Text Domain Mismatch
#223ManageWP Worker235065651m+Non-prefixed class
#224WP BackItUp Community Edition232579896k+Non-prefixed global variable
#225Clone2324426240k+Output is not escaped
#226WP Editor2350233520k+Unsafe printing function
#227WP Free SSL237351,3451k+Non-prefixed global variable
#228Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions231,1131,8629k+Output is not escaped
#229WP Hotelier236931,6352k+Non-prefixed global variable
#230WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#231FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce239412,17920k+SQL query is not prepared
#232WP Mega Menu239927928k+Non-prefixed global variable
#233WP Migrate Lite – Migration Made Easy23369255200k+Exception output is not escaped
#234Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820230k+Missing Translators Comment
#235WP STAGING – WordPress Backup, Restore, Migration & Clone231,5041,607100k+Non-prefixed global variable
#236Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#237WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1583,64220k+Interpolated SQL is not prepared
#238WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress234,38088820k+Output is not escaped
#239Comments – wpDiscuz236201,18070k+Non-prefixed global variable
#240Photo Engine (Media Organizer & Lightroom)232526502k+Direct Query
#241Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress232,3171,7145k+Output is not escaped
#242Zephyr Project Manager236672,4541k+Non-prefixed global variable
#2431 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone24140193400Direct Query
#244404 Solution244831,35510k+Non-prefixed class
#245A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#246AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2341,4647k+Output is not escaped
#247Ad Inserter – Ad Manager & AdSense Ads244,260812300k+Output is not escaped
#248Advanced Contact form 7 DB247641,96070k+Non-prefixed global variable
#249Advanced iFrame248871,12040k+Non-prefixed global variable
#250Affiliates Manager241,2686538k+Unsafe printing function